Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (raw, json)
Hash identifier:          jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=
Subject key identifier:   F5:54:72:D5:96:25:35:E6:76:6B:CB:20:74:CD:CF:CC:67:3F:A4:20
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       114EB4B8D95127217F9C52EDC3FE6294ADEA9262
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa
Signing time:             Sun 03 May 2026 02:21:00 +0000
ROA not before:           Sun 03 May 2026 02:16:00 +0000
ROA not after:            Sun 02 May 2027 02:21:00 +0000
asID:                     211407
IP address blocks:        103.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 19:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4e:b4:b8:d9:51:27:21:7f:9c:52:ed:c3:fe:62:94:ad:ea:92:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: May  3 02:16:00 2026 GMT
            Not After : May  2 02:21:00 2027 GMT
        Subject: CN=F55472D5962535E6766BCB2074CDCFCC673FA420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:9b:4d:8d:52:c7:3a:08:8a:df:b0:40:ab:
                    55:6e:75:e0:73:e6:c4:85:bc:af:a9:89:c0:05:da:
                    65:74:26:6d:6c:e2:cf:7d:2c:4a:92:99:6a:13:8f:
                    77:4e:d5:b3:6a:9d:39:1f:75:5d:ce:c8:f9:3c:3b:
                    33:89:b7:aa:2c:ab:79:db:89:27:86:a3:8e:95:80:
                    c9:9d:5c:14:59:36:3a:05:df:9d:9b:16:e8:44:0e:
                    93:6d:9d:1c:b6:e2:25:85:61:7c:da:7a:97:9f:42:
                    80:05:37:b1:1c:31:36:31:0a:09:7c:00:57:ef:74:
                    2a:3f:0d:ac:1e:7f:62:11:df:19:b0:68:95:31:10:
                    58:1f:92:dd:ec:5f:4c:b5:49:be:ef:bf:fb:5c:8e:
                    43:31:41:f4:4c:fd:79:03:f8:13:59:13:85:9f:ba:
                    92:30:35:d7:34:a6:fd:48:ed:69:63:77:08:1a:c9:
                    e0:b3:e0:6d:f1:e5:69:27:4b:8f:56:89:46:92:cd:
                    ae:a8:e8:89:58:3f:a3:08:ed:54:b4:a6:6c:cb:21:
                    99:38:4e:63:46:e5:92:0e:9e:f3:56:7d:de:98:11:
                    4e:56:28:5a:f3:22:27:5a:f9:2b:c5:f3:0c:46:3d:
                    7c:2c:2e:ff:7b:3b:ee:10:02:20:c8:be:16:90:ad:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:72:D5:96:25:35:E6:76:6B:CB:20:74:CD:CF:CC:67:3F:A4:20
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:58:ee:68:ce:24:b4:6c:df:f6:8e:02:a2:94:b0:5e:c2:e4:
         8b:04:be:b5:c3:7f:5b:59:6d:68:62:d0:9b:c8:f1:8f:9a:92:
         de:8d:fe:b7:37:28:af:1b:c8:a0:a8:0c:4c:4c:f2:82:2b:03:
         13:df:be:7a:fc:34:08:06:af:ef:32:9d:8d:73:40:94:3c:98:
         09:7a:b6:9e:7d:2d:4e:5b:71:1c:66:8a:1e:07:67:35:7d:2d:
         ad:43:bb:3e:42:cb:86:3e:43:cb:a6:b0:69:3f:21:ec:67:d9:
         7d:e3:57:f4:7c:07:12:85:3c:95:1e:4a:f0:83:8f:10:f3:8f:
         d5:af:96:c5:24:20:37:ea:3f:ae:9d:81:ee:52:0c:ce:ef:c0:
         0b:ad:fe:68:db:8c:01:89:bf:61:df:98:9b:72:0f:99:0a:64:
         e0:31:3b:e1:bb:5d:2e:82:8c:c5:0d:15:e4:90:02:6a:8a:6c:
         17:e1:89:7b:ef:1d:79:3c:ff:98:24:ef:5b:8c:ad:f0:6b:ac:
         1a:e3:45:a6:92:33:21:dd:f4:88:71:ac:1c:a9:5f:89:51:82:
         69:70:78:5b:17:f0:da:13:79:79:24:1b:45:15:bc:6f:dd:58:
         f8:a5:78:9b:a1:40:5f:93:ec:61:c5:c0:b6:d6:99:33:97:c5:
         be:60:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client